EDR: What does error "could not find parent proc details for fork child xxxx - while terminating fork" mean?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

What does the error "could not find parent proc details for fork child xxxx - while terminating fork" mean?

Environment

• EDR Linux sensor: 7.1.0+

Resolution

This error message means while the fork action is terminating, and the child process is exiting, the sensor can't identify the parent process in time.